CVEvulnerability

CVE-2007-1463

6.8 MEDIUM Published 2007-03-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-03-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs.

Affected configurations

• inkscape inkscape 0.40 • inkscape inkscape 0.41 • inkscape inkscape 0.42 • inkscape inkscape 0.42.1 • inkscape inkscape 0.42.2 • inkscape inkscape 0.43 • inkscape inkscape 0.44

References